CISM Practice Test

CISM Practice Test practice questions, page 19 of 50, with answer review and explanations.

Question 91

Which of the following BEST enables the deployment of consistent security throughout international branches within a multinational organization?

  1. Remediation of audit findings
  2. Decentralization of security governance
  3. Establishment of security governance
  4. Maturity of security processes

Question 92

What is the PRIMARY benefit of effective configuration management?

  1. Standardization of system support
  2. Reduced frequency of incidents
  3. Decreased risk to the organization's systems
  4. Improved vulnerability management

Question 93

A large organization is in the process of developing its information security program that involves working with several complex organizational functions. Which of the following will BEST enable the successful implementation of this program?

  1. Security governance
  2. Security policy
  3. Security metrics
  4. Security guidelines

Question 94

What is the BEST reason to keep information security policies separate from procedures?

  1. To keep policies from having to be changed too frequently
  2. To ensure that individual documents do not contain conflicting information
  3. To keep policy documents from becoming too large
  4. To ensure policies receive the appropriate approvals

Question 95

A small organization has a contract with a multinational cloud computing vendor. Which of the following would present the GREATEST concern to an information security manager if omitted from the contract?

  1. Escrow of software code with conditions for code release
  2. Right of the subscriber to conduct onsite audits of the vendor
  3. Authority of the subscriber to approve access to its data
  4. Commingling of subscribers' data on the same physical server